ore aware of the unsolved issues.
--
Happy hacking
Petter Reinholdtsen
ing
Petter Reinholdtsen
-tracker.debian.org/tracker/CVE-2014-0254
--
Happy hacking
Petter Reinholdtsen
--
To UNSUBSCRIBE, email to debian-security-tracker-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/2fld22myv3s@diskless.uio.no
with the
mail address. PErhaps the LTS list should be mentioned there?
Not that I am unhappy with the speed of the reply. I believe it was
very quick already. :)
--
Happy hacking
Petter Reinholdtsen
--
To UNSUBSCRIBE, email to debian-security-tracker-requ...@lists.debian.org
with a subject
to do so myself. :(
If you want more direct feedback from me, we could meet on IRC to
exchange knowledge. Otherwise, you can ask using email.
--
Happy hacking
Petter Reinholdtsen
--
To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org
with a subject of unsubscribe. Trouble
assosiated with CVEs, to make it
easier to figure out which Debian package are affected by a given CVE.
Are you aware of my proposal to do this, mentioned on debian-security
and also drafted on URL: http://wiki.debian.org/CPEtagPackagesDep ?
--
Happy hacking
Petter Reinholdtsen
to motivate people to provide CPE codes with the packages.
--
Happy hacking
Petter Reinholdtsen
--
To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20120702215911.gd32
I just created URL: http://bugs.debian.org/603344 to track
CVE-2010-2941 in BTS. You might want to add a reference to it from
URL: http://security-tracker.debian.org/tracker/CVE-2010-2941 .
Happy hacking,
--
Petter Reinholdtsen
--
To UNSUBSCRIBE, email to debian-security-tracker-requ
need to log out. So each
users session need to keep track of when he logged in and check if
some changes requiring a logout has happened since then. Should not
be too hard, though.
Friendly,
--
Petter Reinholdtsen
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe
[David Pastern]
Interesting question. Sadly, for a long, long while, the
development process of Debian has been slower than a dead snail
nailed to the floor.
As a participant in that process, I have not had that experience.
The inability, or indecision to actually include new technologies
[Frans Pop]
IMO the status of the security team is not changed by that mail: if
it was delegated before that time, it still is, and similar if it
was not.
Personally, I only find it reasonable that all groups in Debian with
special privileges within the Debian community are delegates. It
[Florian Weimer]
I don't think so. Joey seems to be satisfied with this situation,
and apart from unanswered email messages to [EMAIL PROTECTED],
there are few complaints, AFAIK.
I'm not sure if the satisfaction of Martin Schulze is a good measuring
stick to judge the quality of the stable
[Florian Weimer]
Correct me if I'm wrong, but the current team doesn't seem to want
new members.
I've been told that the current stable security team consist of one
person doing the work, Martin Schulze. If this team do not want new
members, something strange is afoot.
And prospective
[Martin F Krafft]
And prospective security team members should start working in the
testing security team. There are no need to keep secrets (all is done
in public),
Which doesn't address the problem that embargoed bugs are possibly
handled suboptimally in Debian.
And it does not address
Are there known security holes in sshd in oldstable (woody)?
Yesterday, I was told that one of the machines I administrate were
rooted, and that this was the springboard used to crack the reporters
machine. He was told this on IRC by the person claiming to do the
breakin. The person breaking in
[Noah Meyerhans]
How about actually maintaining them?
That's exactly what I think we should do.
Is this we as in you, or we as in someone else?
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
[Martin Wodrich]
IIRC security-support for sarge started befor its release.
But only one month before the release.
That depends on your definition of support. The testing security team
was working hard to secure it a long time before sarge was released.
[Sven 'Rae the Git' Grounsell]
Also, you are IMHO ignoring, that Debian is one of the _very_ few
distros, that provides _seamless_ upgrades between even major
releases.
This is a slight exaggeration, as this do not really work very
seamlessly for packages where the configuration was changed.
[Alvin Oga]
i don't want any handholding ... other than access the the resources
and info and/or question answer ..
- in my case, i'd like to create test-sec.debian.org
for which i cannot do anything about it unless i do get
some handholding and it's purpse to supplement
19 matches
Mail list logo